06/30/2005 13:13 FAX 216 696 $731 
09/771,734 



AMIN, & TUROCY LLP. @10O2 

MS 1 55740.01/MSFTP1 85US 



Amendments to the Specification 

Id the Specification : 

Please replace the paragraph on page 6, lines 3-10 with the following paragraph: 

The system 10 also includes a filter component 20 programmed and/or configured to 
control sending messages from the hardware component 16. For example, the filter component 
20 may control whether a message is sent from the hardware to component 16 to an associated 
communications fabric 22. In particular, the filter component 20 examines the validation 
information 18 relative to selected data in the message from the process 12, such as may be 
provided to the process 12 by the other process 14. The filter component 20 validates the 
selected data based on the validation information 1 8 and, in turn, controls whether the message 
may be sent. 

Please replace the paragraph on page 9, lines 12-22 with the following paragraph: 

Referring back to Fig. 2, an attribute 90 is associated with the queue pair 60 to improve 
the security ef at the sender's channel adapter 62 in accordance with an aspect of the present 
invention. The attribute 90 has a condition that is set in a privileged operation not accessible by 
the process 52, such as by the operating system 56 associated with the process 52. The attribute 
90 may have one of two or more conditions (or values), such as corresponding to a single bit or a 
multi-bit field. The transport engine 70 may, in turn, employ a detected condition of the attribute 
90 to control sending each message from the send queue 64. For example, the transport engine 
70 may determine whether or not to send a given message based on selected data contained in 
the message (e.g: ? the Qkey 86) and the attribute condition. If the message is not validated, the 
message may be dropped and removed from the queue pair 60. 
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Please replace the paragraph on page 1 3 7 lines 10-1 8 with the following paragraph: 

Each request 154 issued by the client 152 is stored as message data 168 in the storage 
device 160. The entry 168 includes a message key 170, which is operable to enforce access 
rights to communication services. The node 150 also includes a channel interface 174 
operatively coupled to the storage devices 160 and 162. In particular, the channel interface 174 
is operative to read data from the storage device 160, such as a message or request from the 
client 152, and to write data to the storage device 162, such as from another client (e.g. y an IO 
device or a process). The channel interface is coupled to one or more ports 176 for 
communicating data over a communications fabric, such as may include a network of links, 
routers, and switches. 
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